Staredit Network > Forums > Lite Discussion > Topic: Should we keep researching code execution?
Should we keep researching code execution?
Jun 30 2014, 11:08 pm
By: trgk  

Jun 30 2014, 11:08 pm trgk Post #1



Custom code injection : Let users create their own code(dll, exe) and put it inside your map, making code auto-executed as their map run.

Custom code execution can enable everything you've imagined in SC. You can even recreate Leauge of Legend in SC. Everything is possible.
But Custom code execution may compromise security severely. You can also create virus in SC. Everything is possible.

So, should research for custom code execution be continued?

Post has been edited 2 time(s), last time on Jul 1 2014, 12:56 am by trgk. Reason: Clarification.



EUD

Jul 1 2014, 6:30 am TF- Post #2



If another security breach is created then it will be patched out relatively soon, Blizzard has the source code but will never use it to add something to sc1, only to protect their dignity by keeping the game barely functional.




Jul 1 2014, 1:56 pm Sand Wraith Post #3

she*

Would this require a different SCBW executable? I don't understand SCBW's normal map process, so I'm just unsure as to how you can actual inject code that will be executed into a map.




Jul 1 2014, 3:12 pm jjf28 Post #4

Oh bother...

Abusing overflows, how else? http://www.staredit.net/topic/16427/ note that my exe launching outline lacks many non-zero'd values that need to be worked backwards from, and an example map which I've neglected to complete.

As for my part i'll press forward with discoveries and trust mapmakers; no one abused EUDA's before they were patched to make a virus AFAIK, and it was 400x less work back then to launch executable code.



Rs_yes-im4real - Clan Aura - jjf28.net84.net

Reached the top of StarCraft theory crafting 2:12 AM CST, August 2nd, 2014.

Jul 1 2014, 4:27 pm Sacrieur Post #5

Still Napping

Do it for science!

Blizzard will just have to patch the game.



None.

Jul 1 2014, 4:38 pm Black_Overseer Post #6



So what are you afraid of?



None.

Jul 1 2014, 4:43 pm Azrael Post #7



"Now I am become Death, the destroyer of worlds."




Jul 1 2014, 6:13 pm NudeRaider Post #8

The entire universe has been neatly divided into things to (a) mate with, (b) eat, (c) run away from, and (d) rocks -Terry Pratchett

Quote from Sacrieur
Do it for science!

Blizzard will just have to patch the game.
At this point I think they'll rather just close down bnet for sc1 and declare it dead.




Jul 2 2014, 6:44 am TF- Post #9



Quote from NudeRaider
Quote from Sacrieur
Do it for science!

Blizzard will just have to patch the game.
At this point I think they'll rather just close down bnet for sc1 and declare it dead.
And opensource the game as consolation :wtfawesome:




Jul 2 2014, 9:01 am trgk Post #10



My opinion :
1. People can't avoid downloading executable code if there is one in the map they're playing.
2. We cannot revert exploit disclosure once it is disclosed.
(It have already been disclosed in rather very cryptic manner. I understand it though with some difficulties)
3. Exploits shouldn't be disclosed until they are fixed to prevent possible abuses.
But Blizzard won't fix SC. (I would be very happy if they would) Therefore shouldn't disclose the method for it.
4. People may do research, but they shouldn't distribute "How to put your own DLL inside your map in 10 minutes" manual things.

cf) Blizzard patching SC1 again? 1.16.2? They dropped SC1 support several years before. I think that's just a false hypothesis;



EUD

Jul 2 2014, 10:35 am LoveLess Post #11

Let me show you how to hump without making love.

Make a map that has an EUDA enabler, injecting the needed bits into the players' StarCraft, then you can stop research.



None.

Jul 2 2014, 8:07 pm Azrael Post #12



Quote from LoveLess
Make a map that has an EUDA enabler, injecting the needed bits into the players' StarCraft, then you can stop research.

Alright, my ears just officially perked up :P




Jul 2 2014, 9:09 pm iCCup.xboi209 Post #13



Quote from LoveLess
Make a map that has an EUDA enabler, injecting the needed bits into the players' StarCraft, then you can stop research.
this




Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[06:14 pm]
jjf28 -- there's also an interesting caveat in the Snowden case: he fled, he didn't stay or return to face justice (after he could be reasonably certain that there would be a court case and not a secret assasination), so he kinda abandoned the moral high-ground
[06:05 pm]
jjf28 -- NudeRaider
NudeRaider shouted: I like the logic http://i.imgur.com/uBxxgKY.png but state secrets are a valid thing, right? I mean secrets that (better) benefit the public if they are kept away from the public. Or is that just another brainwashed train-of-thought?
if we're significantly less safe because of the information he leaked (and I don't know enough to make that judgement) then it's the classic balancing act of safety/authoritarianism vs freedom/privacy
[05:10 pm]
IskatuMesk -- you can take my secrets from my cold dead buttcheeks
[04:47 pm]
NudeRaider -- I like the logic http://i.imgur.com/uBxxgKY.png but state secrets are a valid thing, right? I mean secrets that (better) benefit the public if they are kept away from the public. Or is that just another brainwashed train-of-thought?
[03:48 pm]
NudeRaider -- maybe you should start numbering them instead of giving them names eliminates that problem and makes things easier all around
[03:47 pm]
NudeRaider -- Mini Moose 2707
Mini Moose 2707 shouted: idk like 15 probs
after 10 or so you stop counting...
[02:46 pm]
Dem0n -- I thought it was gonna be a dick
[02:35 pm]
TF- -- all you need is a pipe and several cans of spinach
Please log in to shout.


Members Online: Roy, Azrael